Release v0.2.10 (#257)

Signed-off-by: Salim Afiune Maya <[email protected]>
lacework · Dec 7, 2020 · 6525933 · 6525933
1 parent 7f8ba11
commit 6525933
Show file tree

Hide file tree

Showing 25 changed files with 339 additions and 60 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,15 @@
+# v0.2.10
+
+## Features
+* feat(cli): new agent access token command (#256) (Salim Afiune)([7f8ba11](https://github.com/lacework/go-sdk/commit/7f8ba113b38ecd768f61e54ba712badf6596a587))
+* feat(compliance): new aws list-accounts command (Salim Afiune Maya)([705f2eb](https://github.com/lacework/go-sdk/commit/705f2ebf9f1b9b5af2eb745c86498fe31c01e174))
+## Refactor
+* refactor: account mapping file for consolidated CT (#252) (Salim Afiune)([402a363](https://github.com/lacework/go-sdk/commit/402a3634765ef8c6f1f65d1be13da2ad34cf2960))
+## Bug Fixes
+* fix(install.sh): avoid logging with 'info' cmd (#254) (Salim Afiune)([df5f8cf](https://github.com/lacework/go-sdk/commit/df5f8cfbc7228ff9bff25e6e22a2ab68acd47fa4))
+* fix: false positive results in pkg manifest scan (#255) (Salim Afiune)([a6d6cda](https://github.com/lacework/go-sdk/commit/a6d6cda9f36b38f8b653bd01ef258bd431611908))
+* fix(databox): remove hardcoded LW account (Salim Afiune Maya)([c806157](https://github.com/lacework/go-sdk/commit/c80615749827c12dbfef5e1c76bf5857cd3dae7a))
+---
 # v0.2.9
 
 ## Features

diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md
@@ -1,14 +1,15 @@
 # Release Notes
-Another day, another release. These are the release notes for the version `v0.2.9`.
+Another day, another release. These are the release notes for the version `v0.2.10`.
 
 ## Features
-* feat(api): enable account mapping file for CT int (#250) (Salim Afiune)([cb99f61](https://github.com/lacework/go-sdk/commit/cb99f61f5da717911d72ff2379a98ce4b7f6dd61))
+* feat(cli): new agent access token command (#256) (Salim Afiune)([7f8ba11](https://github.com/lacework/go-sdk/commit/7f8ba113b38ecd768f61e54ba712badf6596a587))
+* feat(compliance): new aws list-accounts command (Salim Afiune Maya)([705f2eb](https://github.com/lacework/go-sdk/commit/705f2ebf9f1b9b5af2eb745c86498fe31c01e174))
 ## Refactor
-* refactor(api): better error check handler (#247) (Salim Afiune)([b363347](https://github.com/lacework/go-sdk/commit/b363347409f242e6ad1a46e1104884a559877ada))
-## Other Changes
-* ci: set container tag to debian-10 that has vulns (#248) (Salim Afiune)([323b91e](https://github.com/lacework/go-sdk/commit/323b91e38c6616a064501c602d58f2cb0a2572f2))
-* ci: dogfooding Lacework Orb html parameter (Salim Afiune Maya)([464d34d](https://github.com/lacework/go-sdk/commit/464d34db0d53fc7e0e9f4b6cbd7663eae963ad46))
-* ci: remove slack alert for win systems (Salim Afiune Maya)([b6b5b45](https://github.com/lacework/go-sdk/commit/b6b5b458de4e69fd0d176522a47a168382a03397))
+* refactor: account mapping file for consolidated CT (#252) (Salim Afiune)([402a363](https://github.com/lacework/go-sdk/commit/402a3634765ef8c6f1f65d1be13da2ad34cf2960))
+## Bug Fixes
+* fix(install.sh): avoid logging with 'info' cmd (#254) (Salim Afiune)([df5f8cf](https://github.com/lacework/go-sdk/commit/df5f8cfbc7228ff9bff25e6e22a2ab68acd47fa4))
+* fix: false positive results in pkg manifest scan (#255) (Salim Afiune)([a6d6cda](https://github.com/lacework/go-sdk/commit/a6d6cda9f36b38f8b653bd01ef258bd431611908))
+* fix(databox): remove hardcoded LW account (Salim Afiune Maya)([c806157](https://github.com/lacework/go-sdk/commit/c80615749827c12dbfef5e1c76bf5857cd3dae7a))
 
 ## Docker Images
 * `docker pull lacework/lacework-cli:latest`

diff --git a/VERSION b/VERSION
@@ -1 +1 @@
-0.2.10-dev
+0.2.10
diff --git a/api/version.go b/api/version.go
diff --git a/cli/docs/lacework.md b/cli/docs/lacework.md
@@ -30,7 +30,8 @@ This will prompt you for your Lacework account and a set of API access keys.
 
 ### SEE ALSO
 
-* [lacework access-token](lacework_access-token.md)	 - generate temporary access tokens
+* [lacework access-token](lacework_access-token.md)	 - generate temporary API access tokens
+* [lacework agent](lacework_agent.md)	 - manage Lacework agents
 * [lacework api](lacework_api.md)	 - helper to call Lacework's RestfulAPI
 * [lacework compliance](lacework_compliance.md)	 - manage compliance reports
 * [lacework configure](lacework_configure.md)	 - configure the Lacework CLI

diff --git a/cli/docs/lacework_access-token.md b/cli/docs/lacework_access-token.md
@@ -1,10 +1,10 @@
 ## lacework access-token
 
-generate temporary access tokens
+generate temporary API access tokens
 
 ### Synopsis
 
-Generates a temporary access token that can be used to access the
+Generates a temporary API access token that can be used to access the
 Lacework API. The token will be valid for the duration that you specify.
 
 ```

diff --git a/cli/docs/lacework_agent.md b/cli/docs/lacework_agent.md
@@ -0,0 +1,40 @@
+## lacework agent
+
+manage Lacework agents
+
+### Synopsis
+
+Manage agents and agent access tokens in your account.
+
+To analyze application, host, and user behavior, Lacework uses a lightweight agent,
+which securely forwards collected metadata to the Lacework cloud for analysis. The
+agent requires minimal system resources and runs on most 64-bit Linux distributions.
+
+For a complete list of supported operating systems, visit:
+
+    https://support.lacework.com/hc/en-us/articles/360005230014-Supported-Operating-Systems
+
+### Options
+
+```
+  -h, --help   help for agent
+```
+
+### Options inherited from parent commands
+
+```
+  -a, --account string      account subdomain of URL (i.e. <ACCOUNT>.lacework.net)
+  -k, --api_key string      access key id
+  -s, --api_secret string   secret access key
+      --debug               turn on debug logging
+      --json                switch commands output from human-readable to json format
+      --nocolor             turn off colors
+      --noninteractive      turn off interactive mode (disable spinners, prompts, etc.)
+  -p, --profile string      switch between profiles configured at ~/.lacework.toml
+```
+
+### SEE ALSO
+
+* [lacework](lacework.md)	 - A tool to manage the Lacework cloud security platform.
+* [lacework agent token](lacework_agent_token.md)	 - manage agent access tokens
+
diff --git a/cli/docs/lacework_agent_token.md b/cli/docs/lacework_agent_token.md
@@ -0,0 +1,40 @@
+## lacework agent token
+
+manage agent access tokens
+
+### Synopsis
+
+Manage agent access tokens in your account.
+
+Agent tokens should be treated as secret and not published. A token uniquely identifies
+a Lacework customer. If you suspect your token has been publicly exposed or compromised,
+generate a new token, update the new token on all machines using the old token. When
+complete, the old token can safely be disabled without interrupting Lacework services.
+
+### Options
+
+```
+  -h, --help   help for token
+```
+
+### Options inherited from parent commands
+
+```
+  -a, --account string      account subdomain of URL (i.e. <ACCOUNT>.lacework.net)
+  -k, --api_key string      access key id
+  -s, --api_secret string   secret access key
+      --debug               turn on debug logging
+      --json                switch commands output from human-readable to json format
+      --nocolor             turn off colors
+      --noninteractive      turn off interactive mode (disable spinners, prompts, etc.)
+  -p, --profile string      switch between profiles configured at ~/.lacework.toml
+```
+
+### SEE ALSO
+
+* [lacework agent](lacework_agent.md)	 - manage Lacework agents
+* [lacework agent token create](lacework_agent_token_create.md)	 - create a new agent access token
+* [lacework agent token list](lacework_agent_token_list.md)	 - list all agent access tokens
+* [lacework agent token show](lacework_agent_token_show.md)	 - show details about an agent access token
+* [lacework agent token update](lacework_agent_token_update.md)	 - update an agent access token
+
diff --git a/cli/docs/lacework_agent_token_create.md b/cli/docs/lacework_agent_token_create.md
@@ -0,0 +1,35 @@
+## lacework agent token create
+
+create a new agent access token
+
+### Synopsis
+
+Create a new agent access token.
+
+```
+lacework agent token create <name> [description] [flags]
+```
+
+### Options
+
+```
+  -h, --help   help for create
+```
+
+### Options inherited from parent commands
+
+```
+  -a, --account string      account subdomain of URL (i.e. <ACCOUNT>.lacework.net)
+  -k, --api_key string      access key id
+  -s, --api_secret string   secret access key
+      --debug               turn on debug logging
+      --json                switch commands output from human-readable to json format
+      --nocolor             turn off colors
+      --noninteractive      turn off interactive mode (disable spinners, prompts, etc.)
+  -p, --profile string      switch between profiles configured at ~/.lacework.toml
+```
+
+### SEE ALSO
+
+* [lacework agent token](lacework_agent_token.md)	 - manage agent access tokens
+
diff --git a/cli/docs/lacework_agent_token_list.md b/cli/docs/lacework_agent_token_list.md
@@ -0,0 +1,35 @@
+## lacework agent token list
+
+list all agent access tokens
+
+### Synopsis
+
+List all agent access tokens.
+
+```
+lacework agent token list [flags]
+```
+
+### Options
+
+```
+  -h, --help   help for list
+```
+
+### Options inherited from parent commands
+
+```
+  -a, --account string      account subdomain of URL (i.e. <ACCOUNT>.lacework.net)
+  -k, --api_key string      access key id
+  -s, --api_secret string   secret access key
+      --debug               turn on debug logging
+      --json                switch commands output from human-readable to json format
+      --nocolor             turn off colors
+      --noninteractive      turn off interactive mode (disable spinners, prompts, etc.)
+  -p, --profile string      switch between profiles configured at ~/.lacework.toml
+```
+
+### SEE ALSO
+
+* [lacework agent token](lacework_agent_token.md)	 - manage agent access tokens
+
diff --git a/cli/docs/lacework_agent_token_show.md b/cli/docs/lacework_agent_token_show.md
@@ -0,0 +1,35 @@
+## lacework agent token show
+
+show details about an agent access token
+
+### Synopsis
+
+Show details about an agent access token.
+
+```
+lacework agent token show <token> [flags]
+```
+
+### Options
+
+```
+  -h, --help   help for show
+```
+
+### Options inherited from parent commands
+
+```
+  -a, --account string      account subdomain of URL (i.e. <ACCOUNT>.lacework.net)
+  -k, --api_key string      access key id
+  -s, --api_secret string   secret access key
+      --debug               turn on debug logging
+      --json                switch commands output from human-readable to json format
+      --nocolor             turn off colors
+      --noninteractive      turn off interactive mode (disable spinners, prompts, etc.)
+  -p, --profile string      switch between profiles configured at ~/.lacework.toml
+```
+
+### SEE ALSO
+
+* [lacework agent token](lacework_agent_token.md)	 - manage agent access tokens
+
diff --git a/cli/docs/lacework_agent_token_update.md b/cli/docs/lacework_agent_token_update.md
@@ -0,0 +1,51 @@
+## lacework agent token update
+
+update an agent access token
+
+### Synopsis
+
+Update an agent access token.
+
+To update the token name and description:
+
+    $ lacework agent token update <token> --name dev --description "k8s deployment for dev"
+
+To disable a token:
+
+    $ lacework agent token update <token> --disable
+
+To enable a token:
+
+    $ lacework agent token update <token> --enable
+
+```
+lacework agent token update <token> [flags]
+```
+
+### Options
+
+```
+      --description string   new agent access token description
+      --disable              disable agent access token
+      --enable               enable agent access token
+  -h, --help                 help for update
+      --name string          new agent access token name
+```
+
+### Options inherited from parent commands
+
+```
+  -a, --account string      account subdomain of URL (i.e. <ACCOUNT>.lacework.net)
+  -k, --api_key string      access key id
+  -s, --api_secret string   secret access key
+      --debug               turn on debug logging
+      --json                switch commands output from human-readable to json format
+      --nocolor             turn off colors
+      --noninteractive      turn off interactive mode (disable spinners, prompts, etc.)
+  -p, --profile string      switch between profiles configured at ~/.lacework.toml
+```
+
+### SEE ALSO
+
+* [lacework agent token](lacework_agent_token.md)	 - manage agent access tokens
+
diff --git a/cli/docs/lacework_compliance.md b/cli/docs/lacework_compliance.md
@@ -4,10 +4,13 @@ manage compliance reports
 
 ### Synopsis
 
-Manage compliance reports for GCP, Azure, or AWS cloud providers.
+Manage compliance reports for Google, Azure, or AWS cloud providers.
 
-To start sending data about your environment to Lacework for compliance reporting
-analysis, configure one or more cloud integration using the following command:
+Lacework cloud security platform provides continuous Compliance monitoring against
+cloud security best practices and compliance standards as CIS, PCI DSS, SoC II and
+HIPAA benchmark standards.
+
+Get started by integrating one or more cloud accounts using the command:
 
     $ lacework integration create
 
@@ -45,6 +48,6 @@ Use the following command to list all available integrations in your account:
 
 * [lacework](lacework.md)	 - A tool to manage the Lacework cloud security platform.
 * [lacework compliance aws](lacework_compliance_aws.md)	 - compliance for AWS
-* [lacework compliance azure](lacework_compliance_azure.md)	 - compliance for Microsoft Azure
-* [lacework compliance gcp](lacework_compliance_gcp.md)	 - compliance for Google Cloud
+* [lacework compliance azure](lacework_compliance_azure.md)	 - compliance for Azure Cloud
+* [lacework compliance google](lacework_compliance_google.md)	 - compliance for Google Cloud
 
diff --git a/cli/docs/lacework_compliance_aws.md b/cli/docs/lacework_compliance_aws.md
@@ -4,25 +4,19 @@ compliance for AWS
 
 ### Synopsis
 
-Manage compliance reports for Amazon Web Services.
+Manage compliance reports for Amazon Web Services (AWS).
 
-To get the latest AWS compliance assessment report, use the command:
+To list all AWS accounts configured in your account:
 
-    $ lacework compliance aws get-report <account_id>
-
-These reports run on a regular schedule, typically once a day.
+    $ lacework compliance aws list-accounts
 
-To find out which AWS accounts are connected to you Lacework account,
-use the following command:
+To get the latest AWS compliance assessment report:
 
-    $ lacework integrations list --type AWS_CFG
-
-Then, choose one integration, copy the GUID and visualize its details
-using the command:
+    $ lacework compliance aws get-report <account_id>
 
-    $ lacework integration show <int_guid>
+These reports run on a regular schedule, typically once a day.
 
-To run an ad-hoc compliance assessment use the command:
+To run an ad-hoc compliance assessment:
 
     $ lacework compliance aws run-assessment <account_id>
 
@@ -50,5 +44,6 @@ To run an ad-hoc compliance assessment use the command:
 
 * [lacework compliance](lacework_compliance.md)	 - manage compliance reports
 * [lacework compliance aws get-report](lacework_compliance_aws_get-report.md)	 - get the latest AWS compliance report
+* [lacework compliance aws list-accounts](lacework_compliance_aws_list-accounts.md)	 - list all AWS accounts configured
 * [lacework compliance aws run-assessment](lacework_compliance_aws_run-assessment.md)	 - run a new AWS compliance report